Mixed Content Issue | WordPress.org

Resolved wproscott
(@wproscott)

2 years, 7 months ago

A pen test conducted on our site has reported an issue with mixed content. The issue relates to https://github.com/stayallive/wp-sentry/blob/master/public/wp-sentry-browser.min.js

and refers to making a call to http://www.example.com

can this URL be updated to //www.example.com or https://www.example.com

The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)

Plugin Author stayallive
(@stayallive)

2 years, 7 months ago

Hi @wproscott, as far as I am aware neither my plugin nor the Sentry SDK makes a call to http://www.example.com. Is it possibly you can share the page where this is happening and/or the report details about this “mixed content” issue? I think the scanner is just seeing the http URL and assuming the worst, no request is actually made as far as I can tell.

If you want you can open an issue with the Browser SDK since I have no control over it from this plugin, we just load the SDK: https://github.com/getsentry/sentry-javascript

Viewing 1 replies (of 1 total)

The topic ‘Mixed Content Issue’ is closed to new replies.

1 reply
2 participants
Last reply from: stayallive
Last activity: 2 years, 7 months ago
Status: resolved